IP > 27.254.66.227

More information on this IP is in AlienVault OTX

Is this malicious?

Malware

MD5	A/V
191ea7b7e74aa6326a484bc828faf955	[Trojan/W32.Staser.38400.B] [Trojan.Dishigy] [Spyware.Password] [WS.Reputation.1] [TROJ_SPNR.0BAU14] [Trojan.Win32.Staser.tbn] [Trojan.Staser!] [UnclassifiedMalware] [Trojan.PWS.Tibia.2497] [TR/ATRAPS.A.1448] [Win32.Troj.Undef.(kcloud)] [Trojan:Win32/Dishigy.I] [W32/Trojan.NSXR-5777] [Trojan.Win32.Staser.AU] [Win32/Spy.Delf.PKE] [BehavesLikeTrojan.ShellObject] [W32/Staser.PKE!tr] [Win32/Trojan.Spy.c9a]
1b3f3891b2bb7e2b5c40d2466144087c	[W32.Clod16f.Trojan.2379] [Worm.Gamarue] [Backdoor.Bot] [Backdoor.Androm!oLcfT3Mhtdc] [Suspicious.Cloud.5] [Backdoor.Win32.Androm.biez] [BackDoor.Andromeda.22] [Worm/Gamarue.I.1283] [Backdoor/Androm.dmn] [Win32.Hack.Androm.bi.(kcloud)] [Worm:Win32/Gamarue.I] [Trojan/Win32.Buzus] [Trj/CI.A] [Trojan-PWS.Win32.QQPass] [Worm.Win32.Gamarue.I]
8fa804105b1e514e1998e543cd2ca4ea	[Exploit.CVE-2012-0158.J] [Shellcode.G] [Exploit.Fnstenv_mov-1] [Exploit.ComObj.CVE-2012-0158.hzuf] [Heuristic.BehavesLike.Exploit.W97.CodeExec.O] [Exploit/MSWord.CVE-2012-0158] [DOC/Ratbolo] [NORMAL:Hack.Exploit.CVE-2012-0158.d!1612165] [Exploit.Win32.IMG-WMF] [MSWord/Toolbar.A!exploit]
91c9fa44821b38d8d35d3c83d63d69ef	[PWSZbot-FMU!91C9FA44821B] [Trojan.Inject] [Trojan.Win32.ShipUp.ftkc] [Virus.Win32.CeeInject] [Trojan.Win32.ShipUp.csaghu] [W32/A-dc72e206!Eldorado] [Trojan.Zbot] [Suspicious.FZN] [TROJ_SPNR.0BAF14] [Trojan.ShipUp!4igpGoM3Hes] [Troj/ShipUp-Z] [TrojWare.Win32.Injector.AUCJ] [Trojan.Winlock.8004] [TR/Crypt.Xpack.32749] [Trojan/Lac.i] [Trojan/Win32.ShipUp] [Win32.Troj.ShipUp.ft.(kcloud)] [Worm:Win32/Gamarue.I] [Win32/TrojanDownloader.Wauchos.A] [Trojan.ShipUp] [Trj/CI.A] [PE:Trojan.Injector!1.9F7C] [Virus.Win32.Zbot] [W32/ShipUp.FTKC!tr] [Zbot.EPP] [Trojan.Win32.ShipUp.AQ] [Win32/Trojan.Downloader.2ab]

IP Whois

Property	Value
Country	Thailand

Reverse DNS

Domain	Date
vitamin.co.th	2014-12-10
www.discoverylaos.com	2013-12-21
discoverylaos.com	2013-12-17
bkkalcohol.com	2013-07-04
gfi.co.th	2013-05-22
prodhanglobal.co.th	2013-05-22
highseasonresort.com	2013-05-16
nl-sanitary.com	2013-05-14
asafurniture.co.th	2013-05-13
bondstreettour.com	2013-05-13
bossotelinn.com	2013-05-13
dchl.co.th	2013-05-13
emacthailand.com	2013-05-13
lenathai.com	2013-05-13
max-caster.com	2013-05-13
n2n.co.th	2013-05-13
panisa.net	2013-05-13
printkampai.com	2013-05-13
go.th	2013-05-12

IP Classes

27.254.66..x=Browse , 27.254.66..x.x=Browse | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]